High reliability triple redundant latch with integrated testability

ABSTRACT

In a preferred embodiment, the invention provides a circuit and method for a high reliability triple redundant latch with integrated testability. Three settable memory elements set an identical logical value into each settable memory element. After the settable memory elements are set, a voting structure with inputs from the second settable memory element, the third settable memory element and control to the settable memory elements determine the logical value held on the first settable memory element. Data may be scanned into and out of the second settable memory element. Data is propagated through the buffer into the third settable memory element. The third settable memory element may be used to scan data out of the triple redundant latch. The propagation delay through a latch is the only propagation delay of the triple redundant latch.

FIELD OF THE INVENTION

This invention relates generally to latch design. More particularly, this invention relates to improving soft error immunity in latches.

BACKGROUND OF THE INVENTION

High-energy neutrons lose energy in materials mainly through collisions with silicon nuclei that lead to a chain of secondary reactions. These reactions deposit a dense track of electron-hole pairs as they pass through a p-n junction. Some of the deposited charge will recombine, and some will be collected at the junction contacts. When a particle strikes a sensitive region of a latch, the charge that accumulates could exceed the minimum charge that is needed to “flip” the value stored on the latch, resulting in a soft error.

The smallest charge that results in a soft error is called the critical charge of the latch. The rate at which soft errors occur or soft error rate (SER) is typically expressed in terms of failures in time (FIT), where 1 FIT typically equals 1 failure/1 billion hours.

A common source of soft errors are alpha particles which may be emitted by trace amounts of radioactive isotopes present in packing materials of integrated circuits. “Bump” material used in flip-chip packaging techniques has also been identified as a possible source of alpha particles.

Other sources of soft errors include high-energy cosmic rays and solar particles. High-energy cosmic rays and solar particles react with the upper atmosphere generating high-energy protons and neutrons that shower to the earth. Neutrons can be particularly troublesome as they can penetrate most man-made construction (a neutron can easily pass through five feet of concrete). This effect varies with both latitude and altitude. In London, the effect is two times worse than on the equator. In Denver, Colo. with its mile-high altitude, the effect is three times worse than at sea-level San Francisco. In a commercial airplane, the effect can be 100–800 times worse than at sea-level. This is because, typically, the cosmic rays will have more energy at higher altitudes. They typically lose energy as they strike other molecules as they descend through the atmosphere.

Radiation induced soft errors are becoming one of the main contributors to failure rates in microprocessors and other complex ICs (integrated circuits). Several approaches have been suggested to reduce this type of failure. Adding ECC (Error Correction Code) or parity in data paths approaches this problem from an architectural level. Adding ECC or parity in data paths can be complex and costly.

At the circuit level, SER may be reduced by increasing the ratio of capacitance created by oxides to the capacitance created by p/n junctions. The capacitance in a latch, among other types, includes capacitance created by p/n junctions and capacitance created by oxides. Since electron/hole pairs are created as high-energy neutrons pass through a p/n junction, a reduction in the area of p/n junctions in a latch typically decreases the SER. Significant numbers of electron/hole pairs are not created when high-energy neutrons pass through oxides. As a result, the SER may typically be reduced by increasing the ratio of oxide capacitance to p/n junction capacitance in a SRAM cell.

There is a need in the art to reduce the SER in latches. An embodiment of this invention reduces the SER in triple redundant latches while adding only a small increase in physical size of the triple redundant latch and reducing the delay time through a triple redundant latch. In addition, two redundant latches are used to scan data into and from the triple redundant latch.

SUMMARY OF THE INVENTION

In a preferred embodiment, the invention provides a circuit and method for a high reliability triple redundant latch with integrated testability. In a fundamental mode, three settable memory elements set an identical logical value into each settable memory element. After the settable memory elements are set, a voting structure with inputs from the second settable memory element, the third settable memory element and control to the settable memory elements determine the logical value held on the first settable memory element. In a test mode, data may be scanned into and out of the second settable memory element. Data is propagated through the buffer into the third settable memory element. The third settable memory element may be used to scan data out of the triple redundant latch. The propagation delay through a single latch is the only propagation delay of the triple redundant latch.

Other aspects and advantages of the present invention will become apparent from the following detailed description, taken in conjunction with the accompanying drawings, illustrating by way of example the principles of the invention.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a schematic of a triple redundant latch. Prior Art

FIG. 2 is a block diagram of an embodiment of an improved triple redundant latch with integrated testability.

FIG. 3 is a block diagram of an improved triple redundant latch with integrated testability.

FIG. 4 is a schematic of an improved triple redundant latch with integrated testability.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT

FIG. 1 is a schematic of a triple redundant latch. The input, 100, to the triple redundant latch is connected to the input of transfer gates, TG1, TG2, and TG3. Control signal, 102, is connected to transfer gates, TG1, TG2, and TG3. Control signal, 102, controls when the signal on the input of transfer gates, TG1, TG2, and TG3 is transferred to the outputs, 104, 106, and 108 of transfer gates, TG1, TG2, and TG3 respectively. The signal presented to outputs, 104, 106, and 108, is stored in LATCH1, LATCH2, and LATCH3 respectively.

After control signal, 102, is turned off, the signal on LATCH1 drives the input of inverter, INV1. After control signal, 102, is turned off, the signal on LATCH2 drives the input of inverter, INV2. After control signal, 102, is turned off, the signal on LATCH3 drives the input of inverter, INV3. The output, 110, of inverter, INV1, drives an input to AND1 and an input to AND2. The output, 112, of inverter, INV2, drives an input to AND1 and an input to AND3. The output, 114, of inverter, INV3, drives an input to AND2 and an input to AND3. The output, 116, of AND1 drives an input of OR1. The output, 118, of AND2 drives an input of OR1. The output, 120, of AND3 drives an input of OR1. The output of the triple redundant latch is the output, 122 of OR1.

A triple redundant latch reduces soft errors by storing the same data in three different latches. For example, when the control signal, 102 is on, a logical high value may be driven from the inputs, 100, of transfer gates, TG1, TG2, and TG3 to the outputs, 104, 106, and 108, of transfer gates, TG1, TG2, and TG3 respectively. After turning control signal 102 off, a logical high value is stored in latches, LATCH1, LATCH2, and LATCH3. The stored logical high value on LATCH1 drives the input of inverter, INV1, and produces a logical low value on the output, 110, of inverter, INV1. The stored logical high value on LATCH2 drives the input of inverter, INV2, and produces a logical low value on the output, 112, of inverter, INV2. The stored logical high value on LATCH3 drives the input of inverter, INV3, and produces a logical low value on the output, 114, of inverter, INV3.

Since the output, 110, 112, and 114 of inverters, INV1, INV2, and INV3, respectively, are low, all the inputs, 110, 112, and 114 to AND1, AND2, and AND3 respectively are a logical low value. Since all the inputs, 110, 112, and 114, to AND1, AND2, and AND3 respectively are a logical low value, the output, 116, 118, and 120 of AND1, AND2, and AND3 respectively are a logical low value. Since the output, 116, 118, and 120 of AND1, AND2, and AND3, respectively are a logical low value, all the inputs of OR1 are a logical low value. Since all the inputs, 116, 118, and 120 to OR1 are logical low value, the output, 122, is logical low value.

If a soft error occurs, for example, in LATCH2, and changes the stored logical value from a logical high value to a logical low value, a logical low value is now presented to the input, 106, of inverter, INV2. The output, 112, of inverter, INV2, presents a logical high value to an input of AND1 and AND3. Since, in this example, the other input, 110 to AND1 and the other input, 114, to AND3, is a logical low value, the output, 116 and 120 of AND1 and AND3 respectively remains a logical low value and the output, 122, does not change. This example illustrates how a single soft error in one latch does not change the original stored value in a triple redundant latch.

As a further example, assume, in addition to the soft error in LATCH2, there is an additional soft error in LATCH3. Now, the input, 108, to inverter, INV3, is a logical low value and as a result, the output, 114, of inverter, INV3, is a logical high value. A logical high value in now presented to an input, 114, of AND2, and to an input, 114, of AND3. Since a logical low and logical high value are presented on the inputs of AND1, the output, 116 of AND1 is still a logical low value. Since a logical low and logical high value are presented on the inputs of AND2, the output, 118 of AND2 is still a logical low value. However, since inputs, 112 and 114, to AND3 are a logical high value, the output, 120, is a logical high value. Since input, 120, to OR1 is a logical high value, the output, 122, changes from a logical low value to a logical high value. This example illustrates how soft errors in two latches of a triple redundant latch do change the original stored value of the triple redundant latch.

A triple redundant latch prevents a single soft error from changing the original value stored in the latch. However, this comes at the cost of additional circuitry which results in a physically larger latch. In addition, a triple redundant latch may introduce time delay in the delay path of the latch. As consequence, a triple redundant latch is usually larger and slower than a single latch.

FIG. 2 is a block diagram of an embodiment of an improved triple redundant latch. In this embodiment, an identical logical value, data-in, DIN, is set into settable memory element1, SME1, settable memory element2, SME2, and settable memory element 3, SME3, by controlling signal SET. After an identical logical value, DIN, is set into settable memory element1, SME1, settable memory element 2, SME2, and settable memory element 3, SME3, by controlling signal SET, the identical logical value is held in the three settable memory elements, SME1, SME2, and SME3. The voting structure, VS1, after an identical logical value, DIN, is set into settable memory element1, SME1, settable memory element2, SME2, and settable memory element 3, SME3, determines the logical value presented on the output, VSOUT, of voting structure VS1, based on the logical values on nodes, NOUT2 and NOUT3.

If the logical value, DIN, stored in the settable memory element 1, SME1, is disturbed by a soft error event, and the other two settable memory elements, SME2 and SME3, are not disturbed by a soft error event, the voting structure 1, VS1, will restore the original logical value stored in the settable memory element 1, SME1.

If the logical value stored in settable memory element two, SME2, is disturbed by a soft error event, the voting structure 1, VS1, will tri-state its output, VSOUT, leaving the original logical value stored in settable memory element 1, SME1. If the two settable memory elements, SME2 and SME3, are disturbed by a soft error event, the logical value original stored in the triple redundant latch may fail.

The original logical value stored in the triple redundant latch may be scanned from the triple redundant latch for test purposes. The logical value, DIN, held on settable memory 2, SM2, is presented to the input, OUT2, of buffer1, BUF1. The output, BOUT, of buffer 1, BUF1, is presented to an input of settable memory 3, SME3. Activating control signal, NSHIFT, allows the logical value presented on BOUT to be propagated to the output, SOUT. The logical value on SOUT may be scanned to a tester to be evaluated.

Scan data, SIN, may also be scanned into the triple redundant latch. When control signal, SHIFT, is activated and control signal, SET, is inactivated, scan data, SIN, may be scanned into settable memory element 2, SME2. Next, the scan data may be scanned into settable memory element 3, SME3, by keeping control signal, SET, inactivated, inactivating control signal SHIFT, and activating control signal, NSHIFT. The logical value scanned into settable memory elements, SME2 and SME3, is then forced into settable memory element 1, SME1, because the output, VSOUT, of voting structure 1, VS1, produces the same logical value when settable memory elements, SME2 and SME3, have the same logical value.

The propagation delay through the triple redundant latch shown in FIG. 2 is determined only by the propagation delay of settable memory element, SME1. This embodiment of the invention significantly improves the delay time of a triple redundant latch. The delay time through the prior art shown in FIG. 1, for example, includes the propagation delay through the slowest latch among latches LATCH1, LATCH2, and LATCH3, the propagation delay through an inverter, INV2, the propagation delay through an AND gate, AND2, and the propagation delay through an OR gate, OR1.

FIG. 3 is a block diagram of a triple redundant latch with improved delay, higher reliability, and integrated testability. The input of the triple redundant latch shown in this example is connected to the inputs, DIN, of transfer gates, TG1, TG2, and TG3. In addition, a tristatable input inverter, a cross-coupled NAND gate, and a cross-coupled NOR gate may used in place of a transfer gate. If the control signal, SET, is on, the signal at the input, DIN, of transfer gates, TG1, TG2, and TG3, is transferred to the output, DOUT, of transfer gate, TG1, the output, OUT2, of transfer gate, TG2, and the output, SOUT of transfer gate, TG3. The logical value presented on the output, DOUT, of transfer gate TG1, is also an input to latch1, L1. The logical value presented on the output, OUT2, of transfer gate TG2, is also an input to latch2, L2. The logical value presented on the output, SOUT, of transfer gate TG3, is also connected to the input, SOUT, of the latch3, L3.

The output, NOUT2, of latch2, L2, is connected to an input of the voting structure, VS1. The output, NOUT3, of latch3, L3, is connected to an input of the voting structure, VS1.

As an example of how redundancy applies for this embodiment, assume that a logical high value is stored. Storage nodes DOUT, OUT2, and OUT3 each have a logical high value stored in this example. The output, NOUT2, of latch2, L2, provides a logical low value to an input of voting structure 1, VS1. The output, NOUT3, of latch3, L3, provides a logical low value to an input of voting structure 1, VS1. Since both inputs to the voting structure, VS1, are a low logical value, the output is a logical high value. If the control signal, NSET is activated, the high logical value on VSOUT is transferred to DOUT.

If, in this example, a soft error event changes the logical value stored on latch1, L1, from a logical high value to a logical low value, voting structure 1, VS1, will restore the original logical high value stored in latch 1, L1, restoring the triple redundant latch to its original undisturbed state. As a result, the triple redundant latch retains the original logical value stored on it despite a single soft error.

If, in this example, a soft error event changes the logical value stored on latch2, L2, from a logical high value to a logical low value, voting structure 1, VS1, will be tri-stated and the original value stored in latch 1, L1, will remained a logical high value. As a result, the triple redundant latch retains the original logical value stored on it despite a single soft error.

If, in this example, a soft error event changes the logical value stored on latch3, L3, from a logical high value to a logical low value, voting structure 1, VS1, will be tri-stated and the original value stored in latch 1, L1, will remained a logical high value. As a result, the triple redundant latch retains the original logical value stored on it despite a single soft error.

If, however, in this example, a soft error event changes the values stored on nodes OUT2 and OUT3, simultaneously the triple redundant latch may change from its original value. If a soft error event changes the logical values stored on nodes OUT2 and OUT3, from logical high values to a logical low values, the inputs, NOUT2 and NOUT3, to voting structure 1, VS1, change from logical low values to logical high values. As a result of having logical high values on the inputs, NOUT2 and NOUT3, the output, VSOUT, of voting structure 1, VS1, is a logical low value. As a result, the logical value stored on DOUT is changed from the original logical high value to a logical low value. In this example, the original value stored in the triple redundant latch is changed from a logical high value to a logical low value.

The original logical value stored in the triple redundant latch may be scanned from the triple redundant latch for test purposes. The logical value held in latch 2, L2, is presented to the input, OUT2, of buffer1, BUF1. The output, BOUT, of buffer 1, BUF1, is presented to the input of transfer gate 6, TG6. Activating control signal, NSHIFT, allows the logical value presented on BOUT to be propagated to the output, SOUT and stored in latch 3, L3. The logical value on SOUT may be scanned to a tester to be evaluated.

Scan data, SIN, may also be scanned into the triple redundant latch. When control signal, SHIFT, is activated and control signal, SET, is inactivated, scan data, SIN, may be transferred through transfer gate 5, TG5, into latch2, L2. Next, the scan data is propagated through buffer 1, BUF1, and presented to the input of transfer gate 6, TG6. Scan data may be scanned into latch 3, L3, by keeping control signal, SET, inactivated, inactivating control signal SHIFT, and activating control signal, NSHIFT. The logical value scanned into latches, L2 and L3, is then forced into latch 1, L1, because the output, VSOUT, of voting structure 1, VS1, produces the same logical value when latches, L2 and L3, have the same logical value. Since transfer gate 4, TG4, is on because NSET is activated, the value on VSOUT is forced onto DOUT.

In addition to improving the soft error rate of a latch, the triple redundant latch shown in FIG. 3 also reduces the delay time through a triple redundant latch because the number of logic delays is reduced.

FIG. 4 is a schematic of an improved triple redundant latch. FIG. 4 contains the same basic blocks that FIG. 3 contains; transfer gate 1, TG1, transfer gate 2, TG2, transfer gate 3, TG3, transfer gate 4, TG4, transfer gate 5, TG5, transfer gate 6, TG6, latch1, L1, latch2, L2, latch3, L3, voting structure 1, VS1, and buffer1, BUF1.

An embodiment of a transfer gate 1, TG1, for the triple redundant latch contains a PFET, MP2 and an NFET MN2. In this embodiment, the drains of PFET, MP2, and NFET, MN2, are connected to the input, DIN, of transfer gate 1, TG1. The sources of PFET, MP2, and NFET, MN2, are connected to the output, DOUT, of transfer gate 1, TG1. The gate of PFET, MP2, is connected to the control input, NSET, of transfer gate 1, TG1. The gate of NFET, MN2, is connected to the control input, SET, of transfer gate 1, TG1.

An embodiment of a transfer gate 2, TG2, for the triple redundant latch contains a PFET, MP3 and an NFET MN3. In this embodiment, the drains of PFET, MP3, and NFET, MN3, are connected to the input, DIN, of transfer gate 2, TG2. The sources of PFET, MP3, and NFET, MN3, are connected to the output, OUT2, of transfer gate 2, TG2. The gate of PFET, MP3, is connected to the control input, NSET, of transfer gate 2, TG2. The gate of NFET, MN3, is connected to the control input, SET, of transfer gate 2, TG2.

An embodiment of a transfer gate 3, TG3, for the triple redundant latch contains a PFET, MP4 and an NFET MN4. In this embodiment, the drains of PFET, MP4, and NFET, MN4, are connected to the input, DIN, of transfer gate 3, TG3. The sources of PFET, MP4, and NFET, MN4, are connected to the output, SOUT, of transfer gate 3, TG3. The gate of PFET, MP4, is connected to the control input, NSET, of transfer gate 3, TG3. The gate of NFET, MN4, is connected to the control input, SET, of transfer gate 3, TG3.

An embodiment of a transfer gate 4, TG4, for the triple redundant latch contains a PFET, MP14 and an NFET MN14. In this embodiment, the drains of PFET, MP14, and NFET, MN14, are connected to the input, VSOUT, of transfer gate 4, TG4. The sources of PFET, MP14, and NFET, MN14, are connected to the output, DOUT, of transfer gate 4, TG4. The gate of PFET, MP14, is connected to the control input, SET, of transfer gate 4, TG4. The gate of NFET, MN14, is connected to the control input, NSET, of transfer gate 4, TG4.

An embodiment of a transfer gate 5, TG5, for the triple redundant latch contains a PFET, MP13 and an NFET MN13. In this embodiment, the drains of PFET, MP13, and NFET, MN13, are connected to the input, SIN, of transfer gate 5, TG5. The sources of PFET, MP13, and NFET, MN13, are connected to the output, OUT2, of transfer gate 5, TG5. The gate of PFET, MP13, is connected to the control input, NSHIFT, of transfer gate 5, TG5. The gate of NFET, MN13, is connected to the control input, SHIFT, of transfer gate 5, TG5.

An embodiment of a transfer gate 6, TG6, for the triple redundant latch contains a PFET, MP15 and an NFET MN15. In this embodiment, the drains of PFET, MP15, and NFET, MN15, are connected to the input, BOUT, of transfer gate 6, TG6. The sources of PFET, MP15, and NFET, MN15, are connected to the output, SOUT, of transfer gate 6, TG6. The gate of PFET, MP15, is connected to the control input, SHIFT, of transfer gate 6, TG6. The gate of NFET, MN15, is connected to the control input, NSHIFT, of transfer gate 6, TG6.

An embodiment of latch1, L1, for the triple redundant latch contains PFET, MP5, NFET, MN5, PFET, MP6, and NFET, MN6. In this embodiment, the gate of PFET, MP5, and the gate of NFET, MN5, is connected to the drain of PFET, MP6 and to the drain of NFET, MN6, the input, DOUT, of latch1, L1. The drain of PFET, MP5, and the drain of NFET, MN5, is connected to the gate of PFET, MP6 and to the gate of NFET, MN6, the output, 400, of latch1, L1. The sources of PFET, MP5 and PFET, MP6 are connected to VDD. The sources of NFET, MN5, and NFET, MN6 are connected to GND.

An embodiment of latch2, L2, for the triple redundant latch contains PFET, MP7, NFET, MN7, PFET, MP8, and NFET, MN8. In this embodiment, the gate of PFET, MP7, and the gate of NFET, MN7, is connected to the drain of PFET, MP8 and to the drain of NFET, MN8, the input, OUT2, of latch2, L2. The drain of PFET, MP7, and the drain of NFET, MN7, is connected to the gate of PFET, MP8 and to the gate of NFET, MN8, the output, NOUT2, of latch2, L2. The sources of PFET, MP7 and PFET, MP8 are connected to VDD. The sources of NFET, MN7, and NFET, MN8 are connected to GND.

An embodiment of latch3, L3, for the triple redundant latch contains PFET, MP9, NFET, MN9, PFET, MP10, and NFET, MN10. In this embodiment, the gate of PFET, MP9, and the gate of NFET, MN9, is connected to the drain of PFET, MP10 and to the drain of NFET, MN10, the input, SOUT, of latch3, L3. The drain of PFET, MP9, and the drain of NFET, MN9, is connected to the gate of PFET, MP10 and to the gate of NFET, MN10, the output, NOUT3, of latch3, L3. The sources of PFET, MP9 and PFET, MP10 are connected to VDD. The sources of NFET, MN9, and NFET, MN10 are connected to GND.

An embodiment of voting structure 1, VS1, for the triple redundant latch contains PFET, MP11, PFET, MP12, NFET, MN11, and NFET, MN12. In this embodiment, the gates of PFET, MP11, and NFET, MN11, are connected to the first input, NOUT2, of voting structure 1, VS1. The gates of PFET, MP12, and NFET, MN12, are connected to the second input, NOUT3, of the voting structure 1, VS1. The source of PFET, MP11, is connected to VDD. The source of NFET, MN11, is connected to GND. The drain, 402, of PFET, MP11, is connected to the source of PFET, MP12,402. The drain, VSOUT, of PFET, MP12, is connected to the drain of NFET, MN12, VSOUT. The source, 404, of NFET, MN12, is connected to the drain of NFET, MN11, 404.

An embodiment of Buffer 1, BUF1, for the triple redundant latch contains PFET, MP16, NFET, MN16, PFET, MP17, and NFET, MN17. In this embodiment, the gate of PFET, MP16, and the gate of NFET, MN16, is connected to the input of BUF1, OUT2. The drain of PFET, MP16, and the drain of NFET, MN16, is connected to the gate of PFET, MP17 and to the gate of NFET, MN17, 406. The drain of PFET, MP17, and NFET, MN17, are connected to the output of buffer1, BUF1, BOUT. The sources of PFET, MP16 and PFET, MP17 are connected to VDD. The sources of NFET, MN16, and NFET, MN17 are connected to GND.

FIG. 4 is a schematic of an improved triple redundant latch. An input signal drives the inputs, DIN, of transfer gate 1, TG1, transfer gate 2, TG2, and transfer gate 3, TG3. If control signal, SET is a logical high value and control signal, NSET, is a logical low value, the signal at the input, DIN, of transfer gate 1, TG1, transfer gate 2, TG2, and transfer gate 3, TG3 is transferred to the output, DOUT, of transfer gate 1, TG1, the output, OUT2, of transfer gate 2, TG2, and the output, SOUT, of transfer gate 3, TG3.

The signal transferred to nodes DOUT, OUT2, and SOUT is also presented to the input, DOUT, of latch1, L1, the input, OUT2, of latch2, L2, and the input SOUT, of latch3, L3. Latches L1, L2, and L3 store the same logical value. The outputs, 400, NOUT2, and NOUT3, of latches, L1, L2 and L3 respectively, output the opposite sense of the logical value stored. The outputs, NOUT2 and NOUT3, of latches, L2, and L3 respectively, are inputs to voting structure, VS1. The inputs, NOUT2 and NOUT3, into voting structure 1, VS1, cause the output, VSOUT, of voting structure 1, VS1, to reinforce the signal presented at the input, DOUT, of latch1, L1, when the transfer gate 1, TG1 is off.

After control input, SET, is driven to a logical low value, and control input, NSET, is driven to a logical high value, latch1, L1, latch2, L2, and latch3, L3 store the original logical value presented on nodes DOUT, OUT2, and SOUT, respectively. If none of the nodes, DOUT, OUT2, and SOUT, is disturbed, then a signal of the same sense is presented on the output, DOUT, of the triple redundant latch.

For example, if a logical high value is stored on nodes DOUT, OUT2, and SOUT, then a logical high value is presented on the output, DOUT, of the triple redundant latch. A logical low value on the output, NOUT2, of latch2, L2, is applied to the first input of voting structure 1, VS1. A logical low value on the output, NOUT3, of latch3, L3, is applied to the second input of voting structure 1, VS1. Because control signal SET is low and control signal NSET is high, a logical high value is transferred from the input, VSOUT, of the fourth transfer gate, TG4, to the input of latch1, L1. With these logical values applied to voting structure 1, VS1, the output, DOUT, of the triple redundant latch, remains a high logical value.

If in this example where a logical high value is stored on nodes, DOUT, OUT2, and SOUT, node DOUT is changed to a logical low value by a soft error event, DOUT will be recovered to a high logical value because the output, VSOUT, of the voting structure, VS1, remains high. Since NSET is a logical high value and SET is a logical low value, the high value on VSOUT is transferred to DOUT.

If a single soft error event changes the logical value stored in latch3, L3, voting structure 1, VS1, will tri-state and not disturb the correct value on DOUT. If a single soft error event changes the logical value stored in latch2, L2, voting structure 1, VS1, will tri-state and not disturb the correct value on DOUT.

If, however, a soft error event changes the values stored on nodes, OUT2 and SOUT, simultaneously the triple redundant latch may change from its original value. For example, if a logical high value is stored on nodes DOUT, OUT2, and SOUT, a logical high value is presented on the output, DOUT, of the triple redundant latch. If a soft error event changes the logical value stored on nodes, OUT2 and SOUT, from a logical high value to a logical low value, inputs, NOUT2 and NOUT3, into voting structure 1, VS1, change from logical low values to logical high values. Since inputs, NOUT2 and NOUT3, of voting structure 1, VS1, are a logical high value, the output, VSOUT, is pulled to a logical low value. Because transfer gate 4, TG4, is on, the high logical value stored on latch1, L1, is then flipped to a logical low value. The output, DOUT, of the triple redundant latch, is then changed from a logical high value to a logical low value.

The original logical value stored in the triple redundant latch may be scanned from the triple redundant latch for test purposes. The logical value held in latch 2, L2, is presented to the input, OUT2, of buffer1, BUF1. The output, BOUT, of buffer 1, BUF1, is presented to the input of transfer gate 6, TG6. Driving control signal, NSHIFT, high, and driving control signal, SHIFT, low, allows the logical value presented on BOUT to be propagated to the output, SOUT and stored in latch 3, L3. The logical value on SOUT may be scanned to a tester to be evaluated.

Scan data, SIN, may also be scanned into the triple redundant latch. When control signal, SHIFT, is driven high, NSHIFT, is driven low, and control signal, SET, is driven low, scan data, SIN, may be transferred through transfer gate 5, TGS, into latch2, L2. Next, the scan data is propagated through buffer 1, BUF1, and presented to the input of transfer gate 6, TG6. Scan data may be scanned into latch 3, L3, by keeping control signal, SET, low, driving control signal SHIFT, low, and driving control signal, NSHIFT, high. The logical value scanned into latches, L2 and L3, is then forced into latch 1, L1, because the output, VSOUT, of voting structure 1, VS1, produces the same logical value when latches, L2 and L3, have the same logical value. Since transfer gate 4, TG4, is on because NSET is high and SET is low, the value on VSOUT is forced onto DOUT.

In addition to improving the soft error rate of a latch, the triple redundant latch shown in FIG. 4 also reduces the delay time through a triple redundant latch because the number of logic delays is reduced.

The foregoing description of the present invention has been presented for purposes of illustration and description. It is not intended to be exhaustive or to limit the invention to the precise form disclosed, and other modifications and variations may be possible in light of the above teachings. The embodiment was chosen and described in order to best explain the principles of the invention and its practical application to thereby enable others skilled in the art to best utilize the invention in various embodiments and various modifications as are suited to the particular use contemplated. It is intended that the appended claims be construed to include other alternative embodiments of the invention except insofar as limited by the prior art. 

1. A triple redundant latch for reducing soft errors comprising: a) a first settable memory element; b) a second settable memory element; c) a third settable memory element; d) a first voting structure; e) a first buffer; f) wherein an identical logic value is set in each settable memory element; g) wherein inputs to the voting structure are provided by the second settable memory element and the third settable memory element; h) wherein an output of the first voting structure determines a logical value held on the first settable memory element after the first settable memory element, the second settable memory element, and the third settable memory element are set; i) wherein the second settable memory element is capable of being set by scan data; j) wherein the second settable memory element into the buffer is capable of propagating data to a scan output; k) wherein data is capable of being scanned from the buffer into third settable memory element; l) wherein data is capable of being scanned out of the third settable memory element; m) wherein a propagation delay through the first settable memory element is the only propagation delay of the triple redundant latch.
 2. The triple redundant latch as in claim 1 wherein the first settable memory element comprises: a) a first transfer gate; b) a second transfer gate; c) a latch.
 3. The triple redundant latch as in claim 2 wherein the transfer gates consist of complementary pass gates.
 4. The triple redundant latch as in claim 2 wherein the transfer gates consist of NFET-only pass gates.
 5. The triple redundant latch as in claim 2 wherein the transfer gates consist of PFET-only pass gates.
 6. The triple redundant latch as in claim 1 wherein the second settable memory element comprises: a) a first transfer gate; b) a second transfer gate; c) a latch.
 7. The triple redundant latch as in claim 6 wherein the transfer gates consist of complementary pass gates.
 8. The triple redundant latch as in claim 6 wherein the transfer gates consist of NFET-only pass gates.
 9. The triple redundant latch as in claim 6 wherein the transfer gates consist of PERT-only pass gates.
 10. The triple redundant latch as in claim 1 wherein the third settable memory element comprises: a) a first transfer gate; b) a second transfer gate; c) a latch.
 11. The triple redundant latch as in claim 10 wherein the transfer gates consist of complementary pass gates.
 12. The triple redundant latch as in claim 10 wherein the transfer gates consist of NFET-only pass gates.
 13. The triple redundant latch as in claim 10 wherein the transfer gates consist of PFET-only pass gates.
 14. The triple redundant latch as in claim 1 wherein the first voting structure comprises: a) a first input; b) a second input; c) an output; d) such that the first input is connected to an output of the second settable memory element; e) such that the second input is connected to an output of the third settable memory element; f) such that the output of the first voting structure forces the logical value initially stored in the triple redundant latch on to the first settable memory element when the second and third settable memory elements contain the logical value initially stored in the triple redundant latch.
 15. A triple redundant latch for reducing soft errors comprising: a) a first transfer gate, the first transfer gate having an input, a first control input, a second control input, and an output; b) a second transfer gate, the second transfer gate having an input, a first control input, a second control input, and an output; c) a third transfer gate, the third transfer gate having an input, a first control input, a second control input and an output; d) a fourth transfer gate, the fourth transfer gate having an input a first control input, a second control input and an output; e) a fifth transfer gate, the fifth transfer gate having an input, a first control input, a second control input and an output; f) a sixth transfer gate, the sixth transfer gate having an input, a first control input, a second control input and an output; g) a first latch, the first latch having an input and an output; h) a second latch, the second latch having an input and an output; i) a third latch, the third latch having an input and an output; j) a voting structure, the voting structure having an a first input a second input and an output; k) a buffer, the buffer having an input and an output; l) wherein the input of the triple redundant latch is connected to the input of the first transfer gate, the input of the second transfer gate, and the input of the third transfer gate; m) where in the scan-in input of the triple redundant latch is connected to the input of the fourth transfer gate; n) wherein the output of the triple redundant latch is connected to the input of the first latch; o) wherein a first control input of the triple redundant latch is connected to the first control input of the first transfer gate, the first control input of the second transfer gate, the first control input of the third transfer gate, and the second input to the fourth transfer gate; p) wherein a second control input of the triple redundant latch is connected to the second control input of the first transfer gate, the second control input of the second transfer gate, the second control input of the third transfer gate, and the first input to fourth transfer gate; q) wherein a first scan control input of the triple redundant latch is connected to the first control input of the fifth transfer gate and the second control input of the sixth transfer gate; r) wherein a second scan control input of the triple redundant latch is connected to the second control input of the fifth transfer gate and to the first control input of the sixth transfer gate; s) wherein the output of the first transfer gate is connected to the input of the first latch and the output of the fourth transfer gate; t) wherein the output of the second transfer gate is connected to the input of the second latch, the output of the fifth transfer gate and the input of the buffer; u) wherein the output of the third transfer gate is connected to the input of the third latch, the output of the sixth transfer gate, and the scan-out of the triple redundant latch; v) wherein the output of the second latch is connected to the first input of the voting structure; w) wherein the output of the third latch is connected to the second input of the voting structure; x) wherein the output of the voting structure is connected to the input of the fourth transfer gate; y) wherein the output of the buffer is connected to the input of the sixth transfer gate.
 16. The triple redundant latch as in claim 15 wherein the first transfer gate comprises: a) a PFET, the PFET having a gate, a drain and a source; b) a NFET, the NFET having a gate, a drain and a source; c) wherein the drains of the PFET and the NFET are connected to the input of the first transfer gate; d) wherein the sources of the PFET and the NFET are connected to the output of the first transfer gate; e) wherein the gate of the NFET is connected to the first control input of the first transfer gate; f) wherein the gate of the PFET is connected to the second control input of the first transfer gate.
 17. The triple redundant latch as in claim 15 wherein the second transfer gate comprises: a) a PFET, the PFET having a gate, a drain and a source; b) a NFET, the NFET having a gate, a drain and a source; c) wherein the drains of the PFET and the NFET are connected to the input of the second transfer gate; d) wherein the sources of the PFET and the NFET are connected to the output of the second transfer gate; e) wherein the gate of the NFET is connected to the first control input of the second transfer gate; f) wherein the gate of the PFET is connected to the second control input of the second transfer gate.
 18. The triple redundant latch as in claim 15 wherein the third transfer gate comprises: a) a PFET, the PFET having a gate, a drain and a source; b) a NFET, the NFET having a gate, a drain and a source; c) wherein the drains of the PFET and the NFET are connected to the input of the third transfer gate; d) wherein the sources of the PFET and the NFET are connected to the output of the third transfer gate; e) wherein the gate of the NFET is connected to the first control input of the third transfer gate; f) wherein the gate of the PFET is connected to the second control input of the third transfer gate.
 19. The triple redundant latch as in claim 15 wherein the fourth transfer gate comprises: a) a PFET, the PFET having a gate, a drain and a source; b) a NFET, the NFET having a gate, a drain and a source; c) wherein the drains of the PFET and the NFET are connected to the input of the fourth transfer gate; d) wherein the sources of the PFET and the NFET are connected to the output of the fourth transfer gate; e) wherein the gate of the NFET is connected to the first control input of the fourth transfer gate; f) wherein the gate of the PFET is connected to the second control input of the fourth transfer gate.
 20. The triple redundant latch as in claim 15 wherein the fifth transfer gate comprises: a) a PFET, the PFET having a gate, a drain and a source; b) a NFET, the NFET having a gate, a drain and a source; c) wherein the drains of the PFET and the NFET are connected to the input of the fifth transfer gate; d) wherein the sources of the PFET and the NFET are connected to the output of the fifth transfer gate; e) wherein the gate of the NFET is connected to the first control input of the fifth transfer gate; f) wherein the gate of the PFET is connected to the second control input of the fifth transfer gate.
 21. The triple redundant latch as in claim 15 wherein the sixth transfer gate comprises: a) a PFET, the PFET having a gate, a drain and a source; b) a NFET, the NFET having a gate, a drain and a source; c) wherein the drains of the PFET and the NFET are connected to the input of the sixth transfer gate; d) wherein the sources of the PFET and the NFET are connected to the output of the sixth transfer gate; e) wherein the gate of the NFET is connected to the first control input of the sixth transfer gate; f) wherein the gate of the PFET is connected to the second control input of the sixth transfer gate.
 22. The triple redundant latch as in claim 15 wherein the first latch comprises: a) a first PFET, the first PFET having a gate, a drain and a source; b) a second PFET, the second PFET having a gate, a drain and a source; c) a first NFET, the first NFET having a gate, a drain and a source; d) a second NFET, the second NFET having a gate, a drain and a source; e) wherein the sources of the first and second PFETs are connected to VDD; f) wherein the sources of the first and second NFETs are connected to GND; g) wherein the gate of the first NFET, the gate of the first PFET, the drain of the second NFET, and the drain of the second PFET are the input of the first latch; h) wherein the drain of the first NFET, the drain of the first PFET, the gate of the second NFET, and the gate of the second PFET are the output of the first latch.
 23. The triple redundant latch as in claim 15 wherein the second latch comprises: a) a first PFET, the first PFET having a gate, a drain and a source; b) a second PFET, the second PFET having a gate, a drain and a source; c) a first NFET, the first NFET having a gate, a drain and a source; d) a second NFET, the second NFET having a gate, a drain and a source; e) wherein the sources of the first and second PFETs are connected to VDD; f) wherein the sources of the first and second NFETs are connected to GND; g) wherein the gate of the first NFET, the gate of the first PFET, the drain of the second NFET, and the drain of the second PFET are the input of the second latch; h) wherein the drain of the first NFET, the drain of the first PFET, the gate of the second NFET, and the gate of the second PFET are the output of the second latch.
 24. The triple redundant latch as in claim 15 wherein the third latch comprises: a) a first PFET, the first PFET having a gate, a drain and a source; b) a second PFET, the second PFET having a gate, a drain and a source; c) a first NFET, the first NFET having a gate, a drain and a source; d) a second NFET, the second NFET having a gate, a drain and a source; e) wherein the sources of the first and second PFETs are connected to VDD; f) wherein the sources of the first and second NFETs are connected to GND; g) wherein the gate of the first NFET, the gate of the first PFET, the drain of the second NFET, and the drain of the second PFET are the input of the third latch; h) wherein the drain of the first NFET, the drain of the first PFET, the gate of the second NFET, and the gate of the second PFET are the output of the third latch.
 25. The triple redundant latch as in claim 15 wherein the voting structure comprises: a) a first PFET, the first PFET having a gate, a drain and a source; b) a second PFET, the second PFET having a gate, a drain and a source; c) a first NFET, the first NFET having a gate, a drain and a source; d) a second NFET, the second NFET having a gate, a drain and a source; e) wherein the source of the first PFET is connected to VDD; f) wherein the source of the second NFET is connected to GND; g) wherein the drain of the second PFET and the drain of the first NFET are connected to the output of the voting structure; h) wherein the gates of the second PFET and first NFET are connected to the second input of the voting structure; i) wherein the gates of the first PFET and the second NFET are connected to the first input of the first voting structure; j) wherein the drain of the first PFET and the source of the second PFET are connected; k) wherein the drain of the second NFET and the source of the first NFET are connected.
 26. The triple redundant latch as in claim 15 wherein the buffer comprises: a) a first PFET, the first PFET having a gate, a drain and a source; b) a second PFET, the second PFET having a gate, a drain and a source; c) a first NFET, the first NFET having a gate, a drain and a source; d) a second NFET, the second NFET having a gate, a drain and a source; e) wherein the sources of the first and second PFETs are connected to VDD; f) wherein the sources of the fast and second NFETs are connected to GND; g) wherein the gates of the first PFET and the first NFET are connected to the input of the buffer; h) wherein the drains of the second PFET and the second NFET are connected to the output of the buffer; i) wherein the the drains of the first PFET and the first NFET are connected to the gates of the second PFET and the second NFET.
 27. A method of manufacturing a triple redundant latch with improved soft error rate comprising: a) fabricating a first transfer gate, the first transfer gate having an input, a first control input, a second control input, and an output; b) fabricating a second transfer gate, the second transfer gate having an input, a first control input, a second control input, and an output; c) fabricating a third transfer gate, the third transfer gate having an input, a first control input, a second control input and an output; d) fabricating a fourth transfer gate, the fourth transfer gate having an input, a first control input, a second control input and an output; e) fabricating a fifth transfer gate, the fifth transfer gate having an input, a first control input, a second control input and an output; f) fabricating a sixth transfer gate, the sixth transfer gate having an input, a first control input, a second control input and an output; g) fabricating a first latch, the first latch having an input and an output; h) fabricating a second latch, the second latch having an input and an output; i) fabricating a third latch, the third latch having an input and an output; j) fabricating a voting structure, the voting structure having an a first input, a second input, and an output; k) fabricating a buffer, the buffer having an input and an output; l) wherein the input of the triple redundant latch is connected to the input of the first transfer gate, the input of the second transfer gate, and the input of the third transfer gate; m) where in the scan-in input of the triple redundant latch is connected to the input of the fifth transfer gate; n) wherein the output of the triple redundant latch is connected to the input of the first latch; o) wherein a first control input of the triple redundant latch is connected to the first control input of the first transfer gate, the first control input of the second transfer gate, the first control input of the third transfer gate, and the second input to the fourth transfer gate; p) wherein a second control input of the triple redundant latch is connected to the second control input of the first transfer gate, the second control input of the second transfer gate, the second control input of the third transfer gate, and the first input to fourth transfer gate; q) wherein a first scan control input of the triple redundant latch is connected to the first control input of the fifth transfer gate and the second control input of the sixth transfer gate; r) wherein a second scan control input of the triple redundant latch is connected to the second control input of the fifth transfer gate and to the first control input of the sixth transfer gate; s) wherein the output of the first transfer gate is connected to the input of the first latch and the output of the fourth transfer gate; t) wherein the output of the second transfer gate is connected to the input of the second latch, the output of the fifth transfer gate and the input of the buffer; u) wherein the output of the third transfer gate is connected to the input of the third latch, the output of the sixth transfer gate, and the scan-out of the triple redundant latch; v) wherein the output of the second latch is connected to the first input of the voting structure; w) wherein the output of the third latch is connected to the second input of the voting structure; x) wherein the output of the voting structure is connected to the input of the fourth transfer gate; y) wherein the output of the buffer is connected to the input of the sixth transfer gate.
 28. The triple redundant latch as in claim 27 wherein the first transfer gate comprises: a) a PFET, the PFET having a gate, a drain and a source; b) a NFET, the NFET having a gate, a drain and a source; c) wherein the drains of the PFET and the NFET are connected to the input of the first transfer gate; d) wherein the sources of the PFET and the NFET are connected to the output of the first transfer gate; e) wherein the gate of the NFET is connected to the first control input of the first transfer gate; f) wherein the gate of the PFET is connected to the second control input of the first transfer gate.
 29. The triple redundant latch as in claim 27 wherein the second transfer gate comprises: a) a PFET, the PFET having a gate, a drain and a source; b) a NFET, the NFET having a gate, a drain and a source; c) wherein the drains of the PFET and the NFET are connected to the input of the second transfer gate; d) wherein the sources of the PFET and the NFET are connected to the output of the second transfer gate; e) wherein the gate of the NFET is connected to the first control input of the second transfer gate; f) wherein the gate of the PFET is connected to the second control input of the second transfer gate.
 30. The triple redundant latch as in claim 27 wherein the third transfer gate comprises: a) a PFET, the PFET having a gate, a drain and a source; b) a NFET, the NFET having a gate, a drain and a source; c) wherein the drains of the PFET and the NFET are connected to the input of the third transfer gate; d) wherein the sources of the PFET and the NFET are connected to the output of the third transfer gate; e) wherein the gate of the NFET is connected to the first control input of the third transfer gate; f) wherein the gate of the PFET is connected to the second control input of the third transfer gate.
 31. The triple redundant latch as in claim 27 wherein the fourth transfer gate comprises: a) a PFET, the PFET having a gate, a drain and a source; b) a NFET, the NFET having a gate, a drain and a source; c) wherein the drains of the PFET and the NFET are connected to the input of the fourth transfer gate; d) wherein the sources of the PFET and the NFET are connected to the output of the fourth transfer gate; e) wherein the gate of the NFET is connected to the first control input of the fourth transfer gate; f) wherein the gate of the PFET is connected to the second control input of the fourth transfer gate.
 32. The triple redundant latch as in claim 27 wherein the fifth transfer gate comprises: a) a PFET, the PFET having a gate, a drain and a source; b) a NFET, the NFET having a gate, a drain and a source; c) wherein the drains of the PFET and the NFET are connected to the input of the fifth transfer gate; d) wherein the sources of the PFET and the NFET are connected to the output of the fifth transfer gate; e) wherein the gate of the NFET is connected to the first control input of the fifth transfer gate; f) wherein the gate of the PFET is connected to the second control input of the fifth transfer gate.
 33. The triple redundant latch as in claim 27 wherein the sixth transfer gate comprises: a) a PFET, the PFET having a gate, a drain and a source; b) a NFET, the NFET having a gate, a drain and a source; c) wherein the drains of the PFET and the NFET are connected to the input of the sixth transfer gate; d) wherein the sources of the PFET and the NFET are connected to the output of the sixth transfer gate; e) wherein the gate of the NFET is connected to the first control input of the sixth transfer gate; f) wherein the gate of the PFET is connected to the second control input of the sixth transfer gate.
 34. The triple redundant latch as in claim 27 wherein the first latch comprises: a) a first PFET, the first PFET having a gate, a drain and a source; b) a second PFET, the second PFET having a gate, a drain and a source; c) a first NFET, the first NFET having a gate, a drain and a source; d) a second NFET, the second NFET having a gate, a drain and a source; e) wherein the sources of the first and second PFETs are connected to VDD; f) wherein the sources of the first and second NFETs are connected to GND; g) wherein the gate of the first NFET, the gate of the first PFET, the drain of the second NFET, and the drain of the second PFET are the input of the first latch; h) wherein the drain of the first NFET, the drain of the first PFET, the gate of the second NFET, and the gate of the second PFET are the output of the first latch.
 35. The triple redundant latch as in claim 27 wherein the second latch comprises: a) a first PFET, the first PFET having a gate, a drain and a source; b) a second PFET, the second PFET having a gate, a drain and a source; c) a first NFET, the first NFET having a gate, a drain and a source; d) a second NFET, the second NFET having a gate, a drain and a source; e) wherein the sources of the first and second PFETs are connected to VDD; f) wherein the sources of the first and second NFETs are connected to GND; g) wherein the gate of the first NFET, the gate of the first PFET, the drain of the second NFET, and the drain of the second PFET are the input of the second latch; h) wherein the drain of the first NFET, the drain of the first PFET, the gate of the second NFET, and the gate of the second PFET are the output of the second latch.
 36. The triple redundant latch as in claim 27 wherein the third latch comprises: a) a first PFET, the first PFET having a gate, a drain and a source; b) a second PFET, the second PFET having a gate, a drain and a source; c) a first NFET, the first NFET having a gate, a drain and a source; d) a second NFET, the second NFET having a gate, a drain and a source; e) wherein the sources of the first and second PFETs are connected to VDD; f) wherein the sources of the first and second NFETs are connected to GND; g) wherein the gate of the first NFET, the gate of the first PFET, the drain of the second NFET, and the drain of the second PFET are the input of the third latch; h) wherein the drain of the first NFET, the drain of the first PFET, the gate of the second NFET, and the gate of the second PFET are the output of the third latch.
 37. The triple redundant latch as in claim 27 wherein the voting structure comprises: a) a first PFET, the first PFET having a gate, a drain and a source; b) a second PFET, the second PFET having a gate, a drain and a source; c) a first NFET, the first NFET having a gate, a drain and a source; d) a second NFET, the second NFET having a gate, a drain and a source; e) wherein the source of the first PFET is connected to VDD; f) wherein the source of the second NFET is connected to GND; g) wherein the drain of the second PFET and the drain of the first NFET are connected to the output of the voting structure; h) wherein the gates of the second PFET and first NFET are connected to the second input of the voting structure; i) wherein the gates of the first PFET and the second NFET are connected to the first input of the first voting structure; j) wherein the drain of the first PFET and the source of the second PFET are connected; k) wherein the drain of the second NFET and the source of the first NPFET are connected.
 38. The triple redundant latch as in claim 27 wherein the buffer comprises: a) a first PFET, the first PFET having a gate, a drain and a source; b) a second PFET, the second PFET having a gate, a drain and a source; c) a first NFET, the first NFET having a gate, a drain and a source; d) a second NFET, the second NFET having a gate, a drain and a source; e) wherein the sources of the first and second PFETs are connected to VDD; f) wherein the sources of the first and second NFETs are connected to GND; g) wherein the gates of the first PFET and the first NFET are connected to the input of the buffer; h) wherein the drains of the second PFET and the second NFET are connected to the output of the buffer; i) wherein the the drains of the first PFET and the first NFET are connected to the gates of the second PFET and the second NFET. 